spring mvc 拦截器怎么拦截jsp页面

spring mvc 拦截器怎么拦截jsp页面

你这个 是拦截带 /jsp 的 .do请求  

解决方案
用spring 的拦截器 去拦截 所有的 .do 请求， 
然后写一个 过滤器去拦截 所有的.jsp 的请求
这样才能防止循环过滤


这种会把所有jsp请求过滤不推荐。

1. <filter>
   
2.         <filter-name> loginFilter</filter-name>
   
3.         <filter-class>
   
4.         net.techfinger.yoyoapp.interceptor.CheckLoginFilter
   
5.         </filter-class>
   
6.     </filter>
   
7.     <filter-mapping>
   
8.         <filter-name>loginFilter</filter-name>
   
9.         <url-pattern>*.jsp</url-pattern>
   
10.     </filter-mapping>
    
11. 
    
12. 
    
13.     <servlet-mapping>
    
14.         <servlet-name>Spring-Servlet</servlet-name>
    
15.         <url-pattern>*.do</url-pattern>
    
16.     </servlet-mapping>
    
17. 
    
18. 
    
19. 
    
20. public class CheckLoginFilter implements Filter{
    
21.     @Override
    
22.     public void destroy() {
    
23.         // TODO Auto-generated method stub
    
24. 
    
25.     }
    
26. 
    
27.     @Override
    
28.     public void doFilter(ServletRequest servletRequest,
    
29.             ServletResponse servletResponse, FilterChain filterChain)
    
30.             throws IOException, ServletException {
    
31.         // TODO Auto-generated method stub
    
32. 
    
33.         HttpServletRequest request = (HttpServletRequest) servletRequest;
    
34.         HttpServletResponse response = (HttpServletResponse) servletResponse;
    
35.         HttpSession session = request.getSession();
    
36.         
    
37.         
    
38.         // 获得用户请求的URI
    
39.         String path = request.getRequestURI();
    
40.         String contextPath = request.getContextPath();
    
41.         String url = path.substring(contextPath.length());
    
42.         
    
43.         Person person =SessionUtils.getPerson(request);
    
44.         
    
45.         if (person == null) {
    
46.             response.sendRedirect(contextPath+"/person.do?method=tologin");
    
47.             return;
    
48.         }
    
49.         if (person.getId()!=null&&person.getPassword()!=null) {
    
50.             filterChain.doFilter(servletRequest, servletResponse);
    
51.             return;
    
52.         }
    
53. 
    
54.     }
    
55. 
    
56.     @Override
    
57.     public void init(FilterConfig filterConfig) throws ServletException {
    
58.         
    
59.     }
    
60. }
    
61. 
    
62. 
    
63. public class AuthInterceptor extends HandlerInterceptorAdapter {
    
64. 
    
65.     private final static Logger log= Logger.getLogger(AuthInterceptor.class);
    
66.     
    
67.     @Override
    
68.     public boolean preHandle(HttpServletRequest request,
    
69.             HttpServletResponse response, Object handler) throws Exception {
    
70.         HandlerMethod method = (HandlerMethod)handler;
    
71.         Auth auth = method.getMethod().getAnnotation(Auth.class);
    
72.         ////验证登陆超时问题 auth = null，默认验证 
    
73.         if( auth == null || auth.verifyLogin()){
    
74.             String baseUri = request.getContextPath();
    
75.             String path = request.getServletPath();
    
76.             Person person =SessionUtils.getPerson(request);
    
77.             
    
78.             
    
79.         
    
80.             if(person == null){
    
81.                 if(path.endsWith(".jsp")){
    
82.                     response.setStatus(response.SC_GATEWAY_TIMEOUT);
    
83.                     response.sendRedirect(baseUri+"/person.do?method=tologin");
    
84.                     return false;
    
85.                 }else{
    
86.                     response.setStatus(response.SC_GATEWAY_TIMEOUT);
    
87.                     Map<String, Object> result = new HashMap<String, Object>();
    
88.                 /*    result.put("success", false);
    
89.                     result.put("logoutFlag", true);//登录标记 true 退出
    
90.                     result.put("msg", "登录超时.");
    
91.                     XmlUtil.sendMsg(response, result);*/
    
92.                     response.sendRedirect(baseUri+"/person.do?method=tologin");
    
93.                     return false;
    
94.                 }
    
95.             }
    
96.         }
    
97.         //验证URL权限
    
98.         if( auth == null || auth.verifyURL()){/*        
    
99.             
    
100.             //判断请求的url,是否包含在该角色的url里
     
101.         
     
102.                 String methodName=request.getParameter("method");
     
103.                 String menuUrl = StringUtils.remove(request.getRequestURI(),request.getContextPath())+"?method="+methodName;
     
104.                 System.out.println(menuUrl);
     
105.                 
     
106.                 if(!SessionUtils.isAccessUrl(request, StringUtils.trim(menuUrl))){                    
     
107.                     //日志记录
     
108.                     String userMail = SessionUtils.getPerson(request).getLoginName();
     
109.                     String msg ="URL权限验证不通过:[url="+menuUrl+"][email ="+ userMail+"]" ;
     
110.                     log.error(msg);
     
111.                     
     
112.                     response.setStatus(response.SC_FORBIDDEN);
     
113.                     Map<String, Object> result = new HashMap<String, Object>();
     
114.                     result.put("success", false);
     
115.                     result.put("msg", "没有权限访问,请联系管理员.");
     
116.                     XmlUtil.sendMsg(response, result);
     
117.                     return false;
     
118.                 
     
119.             }
     
120.         */}
     
121.         return super.preHandle(request, response, handler);
     
122.     }